Light

gojekfarm / kingsly-certbot Goto Github PK

View Code? Open in Web Editor NEW

0.0 16.0 5.0 70 KB

Updates your SSL certs for you by fetching them so that you don't have to do that

License: Apache License 2.0

Ruby 99.65% Shell 0.35%

kingsly-certbot's Introduction

Kingsly::Certbot

kingsly-certbot would update the local certs and update them from the ones generated by kingsly

Installation

please follow the instructions over at https://github.com/gojekfarm/kingsly-certbot-cookbook

Usage

certbot is usually run as a systemd service and the installation can be done using the kingsly-certbot-cookbook, the kingsly-certbot requests certs from kingsly

Development

After checking out the repo, run bin/setup to install dependencies. Then, run rake spec to run the tests. You can also run bin/console for an interactive prompt that will allow you to experiment.

To install this gem onto your local machine, run bundle exec rake install. To release a new version, update the version number in version.rb, and then run bundle exec rake release, which will create a git tag for the version, push git commits and tags, and push the .gem file to rubygems.org.

Running Test suite

$ mkdir /etc/ipsec.d
$ sudo chown -R $USER:staff /etc/ipsec.d
$ bundle exec rake

Building locally

$ gem build kingsly_certbot.gemspec
$ gem push kingsly_certbot-<version>.gem

Contributing

Bug reports and pull requests are welcome on GitHub at https://github.com/gojekfarm/kingsly-certbot

kingsly-certbot's People

Contributors

Watchers

Forkers

mrityunjoy olttwa masriyan mrunalchawda2610 myfdtestacc

kingsly-certbot's Issues

ipsec: don't restart ipsec service if assets are already updated

when the update assets method is called inside the ip_sec adapter, we shouldn't be restarting the ipsec service everytime certbot runs as this will lead to any existing users connected to the VPN to get disconnected.

Add docs on what is this used for

update docs on the context of why is this built
add docs on the ipsec_vpn adapter
add future adapters

write integration tests

VPN: restart ipsec service after certs are renewed

After the newer certs are placed and the older ones have been moved to a backup dir, we would need to restart the IPSEC service on the box.

ipsec service wouldn't come up

the service won't come up after the update_assets call in the adapter (ipsec) has been called, and the restart service directive has been given.

have the client get the certs from kingsly

the client should be able to get the certs from kingsly, after the client is correctly configured with the configuration values and should be able to hold the response as a certbundle object.

save the certificates in the right directory after getting them from kingsly

the certs should be saved by the client in the directory where it would be required for the VPN's to pick it up after it has received the response from kingsly

run tests in CI

have the tests run for inside travis CI

Do not replace cert files if content is same

the client should not replace the files if the content of the incoming cert files and the ones present are the same.

integrate sentry

setting configuration for the kingsly client

The client should set the configuration to talk to kingsly server

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.